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9. The method of claim 7 wherein said given endpoint is a server for providing weh 



services. 



10. The method of claim 1 wherein said each session with a given endpoint is an original 
session and wherem a given parallel session has an mitial sequence number differing fiom 
an initial sequence number of a particular original session from which said given parallel 
session was derived. 

11. The method of claim 1 further comprising screening said payload data for iUegitimate 
requests. 

12. The method of claim 1 1 wherein said each session with a given endpoint is an original 
session and further comprising: 

on finding an illegitimate request in respect of a given original session, injecting a 
session termination command into said given original session directed to said given 
endpoint and to said another endpoint for said particular original session. 

13. The method of claim 1 further comprising screening said payload data for events. 

14. The method of claim 13 wherein said each session with a given endpoint is an original 
session and further comprising: 

on determining an event in respect of a given original session, logging said event. 

15. The method of claim 14 wherein said event is an e-mail message having certain 
parameters. 

16. The method of claim 1 wherein said each session with a given endpoint is an origmal 
session and further comprismg, where contx)l information in packets of said origmal session 
instmct termination of said origmal session, creating packets in said parallel session with 
control information to terminate said parallel session. 
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17. A session re-constructor, con^iising: 

an inter&ce for connection to a session-oiiented network; 
an inter&ce for connection to a given eaSpoint; 

a processor for, for each session with said given endpoint, said each session 
comprising packets exchanged between said given endpoint and another endpoint, said 
packets having one or both of control and payload data, creating a parallel session having 
payload data mirroring all payload data of said each session which is destined for said given 
endpoint. 

18. The session re-constructor of claim 17 further comprising a memory storing a table with 
infonnation on said each session, said information comprising an address of said another 
endpomt, a port number of said another endpoint, a sequence number of said another 
endpoint, a port number of said given endpoint, and a sequence number of said given point. 

19. A conq>uter readable medium containing con:5)uter executable mstructions for causing a 
processor connected into a session-oriented network to: 

for each session with a givetf endpomt, said each session comprismg packets 
exchanged between said given endpomt and another endpoint, said packets having one or 
both of control and payload data, creating a parallel session having payload data mirroring 
all payload data of said each session which is destmed for said givea endpoint. 
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